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METHOD OF CREDIT GUARANTEE IN ELECTRONIC COMMERCE 



BACKGROUND OF THE INVENTION 

The present invention relates to a method of credit guarantee in electronic commerce 
5 transactions. More particularly, the present invention is directed to a method of credit 

guarantee in electronic commerce transactions through an interconnection network, such as 
the Intemet, comprised of a plurality of individual networks and/or computer systems, 
wherein such individual networks and/or computer systems may be part of networks with 
different stipulations. 

10 In recent years, business transactions, such as electronic commerce, via a 

communication network have increased significantly. One explanation for this is the 
widespread use of the Intemet. The procedure for an electronic commerce transaction shall 
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p be explained by way of example of an electronic commerce transaction between a purchaser 

of a product, wherein the purchaser is using a computer (user computer) to access the 
^4 15 Intemet, and an electronic retail entity or shop operated by a seller of product (shop). 

An electronic shop is characterized by a group of Web pages (a Web site) opened by a 
^ retail entity or shop on the Intemet. Such an electronic shop is typically stored within a 

database connected to a world wide web (WWW) server, wherein the database contains 
pjl HTML text and is composed of forms with entry spaces for required items in receiving a 

20 purchase order or a list of products sold, or image data inserted in such text. 

A purchaser accesses to the Intemet by a proper connection method, such as a dial-up 
connection through his or her user computer. The purchaser then browses through the web 
pages of an electronic shop using a browser, and confirms the price, specifications and other 
items for a desired product. Once the decision is made to purchase an item, the purchaser 
25 accesses the web page for the purchase order form for the shop. 

The purchase order form typically includes various entries to be filled in so as to 
specify the delivery point, such as name and address, and an accounting method (transfer via 
a bank, pay on delivery, pay by credit card, etc.). After filling in the necessary entries of the 
form, the purchaser sends the form to the appropriate location. Concurrently, the WWW 
30 server for the electronic shop is notified of the product purchase event and information 
relating to the ordered product, purchaser, purchase date, payment details as well as the 
delivery address of the event (the storage place and the location of the program to be given as 
a parameter), etc. 
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A manager of the electronic shop then obtains data equivalent to the product purchase 
event via a computer, etc. operated by himself or herself in real time or at a later time, and 
carries out a delivery processing of the specified product to the specified address according to 
this event and an accounting processing according to the specified method. 
5 Electronic commerce through the Intemet is significantly different from the electronic 

commerce used in such previous computer communication network with a closed network 
(individual network) in that the product purchaser (user) and the seller of the product (shop) 
may be affiliated with networks operated under different stipulations. 

When a purchaser and a shop make an electronic commerce transaction under the 
10 same stipulation and are registered in the same network, then the operator of such network 
makes an assurance of identity of each. When there is a problem, the identity of a party can 
be quickly verified to the other party, and the record and the security of transaction evidence 
is easily maintained. 

However, in cases of an electronic commerce transaction through an interconnection 

15 network comprised of many individual networks having different stipulations, such as the 
Intemet, it is very difficult for the purchaser and the seller to make the judgment as to where 
to put the foundation of trust in the other party. For example, sellens seek the disclosure of 
private information of a purchaser, and try to insure the collection of payment and the ready 
identification of a purchaser should there be a problem. 

20 For purchasers, the foundation of trust in a shop is more uncertain. There is a 

possibility that a shop will "disappear" after collecting the payment for the products. At that 
point, it will be extremely difficult for the purchaser to identify the shop. Moreover, even 
when purchasing a product such as a software or data by downloading, the purchaser is 
generally required to disclose more of his or her private information than is necessary. 

25 Therefore, a purchaser is constantly exposed to the danger of misuse or disclosure of his or 
her private information. 

There exists an authentication system for mutual identity assurance by a third party on 
the Intemet. However, since the registration and deletion of identity information to a 
verification server operated by such system is easily done, it is possible to erase the identity 

30 information right after the completion of the commercial transaction. Of course, then there is 
no ability to guarantee the transaction itself. If the evidence of transaction is to be 
guaranteed, then the parties must disclose extremely detailed private information to each 
other. 
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Therefore, there is a need to provide a highly rehable credit guarantee method without 
the disclosure of private information for electronic commerce through an interconnection 
network, such as the Intemet, and the various computer systems associated with such method. 

SUMMARY OF THE INVENTION 

In accordance with the present invention, there is provided a highly reliable credit 
guarantee method without the disclosure of private information for electronic commerce 
through an interconnection network, such as the Intemet, and the various computer systems 
associated with such method. 

The method for credit guarantee according to the present invention is used in an 
electronic commerce transaction via an interconnected network comprised of several 
individual networks, wherein the transaction occurs between a shop server operated by a 
product selling entity and a member computer used by a member who is contracted with the 
settlement agency. The method is comprised of the following steps and components. 

(1) A settlement agency operates a member management server that is connected 
to an interconnection network. The member maintenance server manages the information of 
members for a plurality of members. When a member computer logs-in after going through a 
designated verification procedure, the log in periods and the anonymous user ID for the 
member's computer is maintained by corresponding the information to the member list 
information. 

(2) A transaction approval server operated by a credit guarantee institution is 
connected to the interconnection network. The transaction approval server maintains an 
aggregated database of shop information comprised of payment methods and private 
information for each of the many product seUing entities and collection institution 
information comprised of payment methods and private information for each of the many 
settlement agencies. The transaction approval server communicates with the member 
maintenance server or shop server accessed by the transaction approval server, after passing 
through a designated verification procedure. 

(3) A shop server receives anonymous user ID for each member computer that 
directly or indirectly accesses the shop server, and it reacts to the product purchase event that 
this member computer had sent by forwarding to the transaction approval server a settlement 
agency identification search request message with anonymous user ID. 

(4) The transaction approval server sends back to the shop server a settlement 
agency identification guarantee message generated after searching the database for the 



anonymous user ID contained in the settlement agency identification search request message 
and selecting the appropriate information from related settlement agency information. 

(5) The shop server access the member maintenance server based on the address 
information contained in the settlement agency identification guarantee message, and sends 

5 the billing substitute request message contained within shop identification information 
relating to the its own identification and the anonymous user ID. 

(6) The member maintenance server sends the transaction approval server a shop 
identification search request message containing the shop identification information 
contained in the billing agency identification search request message. 

10 (7) The transaction approval server searches the database based on shop 

identification information included in the shop identification search request message, then, 
selects the appropriate information from related shop information, and returns a shop 

i;3 identification guarantee message to the member maintenance server. 

12 (8) The member maintenance server, once it receives the shop identification 

"P 15 guarantee message, based on the time of occurrence (transaction time) of product purchase 

mJ 

„C event and anonymous user ID included in the billing substitute request message sent by the 

{k 

shop server, confirms the completion of transaction by sending a transaction confirmation 
' f notice that includes the one and only order number generated by the shop server or member 

I'll maintenance server and selected information from the applicable member list information, 

20 shop identification guarantee message, or billing substitute request message, to the applicable 
member computer that is already logged in. 

(9) The member maintenance server, after it confirms the transaction completion, 
records the order number and the appropriate information selected from billing substitute 
request message by associating them to the applicable member information, and sends 
25 information selected from billing substitute request message and transaction completion 

report message including order number and the result of transaction completion notice to the 
shop server, and sends a transaction report message that includes the order number and 
information selected from billing substitute request message to the transaction confirmation 
server. 

30 (10) The shop server, once it receives the transaction completion report message, 

sends a transaction verification request message that includes the order number to the 
transaction approval server. 

(11) The transaction approval server records the applicable order number and 
applicable transaction monies in the transaction record book by corresponding the order 
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number with information contained in the transaction report message and transaction 
verification request message, and sends a transaction verification message that corresponds 
the order number to the shop server. 

(12) The shop server, once it receives the transaction verification message, records 
the order number in this verification message and the information selected from the 
settlement agency identification guarantee message or billmg substitute request message that 
were the acceptance origin of the transaction verification message to the sales record book. 

In a second embodiment of the present invention, items (3) through (5) above are 
replaced with the following items. 

(3) The transaction approval server timely sends a settlement agency 
identification guarantee message generated from selective information from settlement 
agency information concerning the settlement agency to the shop server. 

(4) The shop server acquires the anonymous user ID assigned to the member 
computer that directly and indirectly access the shop server, and the address information for 
the member mauitenance server that is assigned to this ID is selected from the settlement 
agency identification guarantee message sent by the transaction verification server 

(5) The shop server reacts to the product purchase event sent by the member 
computer, and compiles selected address information relating to the member maintenance 
specified by the anonymous user ID. The shop server sends a billing substitute request 
message that includes the shop identification information relatmg to the its own identification 
and the anonymous user ID. 

In another embodiment of the present invention, items (3) and (4) from the second 
embodiment are replaced with the following items. 

(3) The shop server maintains and manages suitable information from the related 
member maintenance server as the settlement agency identification guarantee information. 

(4) The shop server acquires the anonymous user ID assigned to the member 
computer that directly and indirectly accessed the shop server, and the address information 
for the member maintenance server that re assigned to this ID is selected from settlement 
agency identification guarantee message. 

Further, in accordance with the present invention, there is provided a method for 
guarantee in electronic commerce transactions between at least one member and at least one 
retail entity, the method comprising: 

accessing a member maintenance server operated by a settlement agency by a 
member desiring an electronic commerce transaction with a retail entity, wherein the member 
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maintenance server verifies the member's identification and any associated member 
information of the member; 

generating selected information relating to at least one of selected payment 
method information and associated private information about the retail entity from selected 
5 information obtained from a transaction approval server operated by a credit guarantee 
institution and transmitting the selected information to at least one of the member 
maintenance server and retail entity server which requested the information; 

generating an anonymous user identification from selected information 
obtained from at least one of the member which accessed the retail server and the member 
10 maintenance server and transmitting the anonymous user identification from the member 
maintenance server to the retail entity server; 

generating a settlement agency identification search request message from 
selected information obtained from the retail entity server and transmitting the settlement 
I ^ agency identification search request message from the retail entity server to the transaction 

15 approval server, wherein the settlement agency identification search request message 
includes the anonymous user identification for the member; 

searching settlement agency information for information related to the 
anonymous user identification obtained from the retail entity server and transmitting selected 
information related to the anonymous user identification from the transaction approval server 
20 to the retail entity server; 

generating a billing agency identification search request message from 
selected information obtained from the retail entity server and transmitting the billing agency 
identification search request message from the retail entity server to the member maintenance 
server, wherein the billing agency identification search request message includes retail entity 
25 identification information and the anonymous user identification; 

generating a retail entity identification search request message from selected 
information obtained from the member maintenance server and transmitting the retail entity 
identification search request message from the member maintenance server to the transaction 
approval server, wherein the retail entity identification search request message includes the 
30 retail entity information contained in the billing agency identification search request 
message; 

generating a retail entity identification guarantee message from selected 
information obtained from the transaction approval server and transmitting the retail entity 
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identification guarantee message containing the selected information from the transaction 
approval server to the member maintenance server; 

verifying information received from the transaction approval server by the 
member maintenance server, generating a transaction completion notice from selected 
information obtained from the member maintenance server, and transmitting the transaction 
completion notice from the member maintenance server to the member to confirm the 
associated transaction, wherein the transaction completion notice includes an order number 
generated by a select one of the member maintenance server and the retail entity server and 
selected information from at least one of associated member information, retail entity 
identification guarantee message, and billing agency identification search request message; 

storing the order number and selected information from ttie billing agency 
identification request message at the member maintenance server, generating a fransaction 
completion report message from selected information obtained from the member 
maintenance server, and transmitting the transaction completion report message from the 
member maintenance server to the retail entity server; wherein the transaction completion 
report message includes the order number, selected information from the billing agency 
identification search request message, and selected information from the transaction 
completion notice relating to the result of the transaction; 

generating a transaction report message from selected information obtained 
from the member maintenance server and transmitting the transaction report message to tiie 
transaction confmnation server, wherein the transaction report message includes the order 
number and selected information from the billing agency identification search request 
message; 

upon receipt of the transaction completion report message by the retail entity 
server, generating a transaction verification request message from selected information 
obtained from the retail entity server, and transmitting the transaction verification request 
message &om the retail entity server to the transaction approval server, wherein the 
transaction verification request message includes the order number; 

verifying the information contained within the transaction report message and 
transaction verification request message, and upon verification, storing selected information 
relating to the order number and applicable associated transaction monies in a transaction 
record database within the transaction approval server, generating a transaction verification 
message for the order number from selected information obtained from the transaction 



approval server, and transmitting the transaction verification from the transaction approval 
server to the retail shop server; and 

upon receipt of the transaction verification message by the retail entity server, 
storing the order number and selected information from at least one of the settlement agency 
identification guarantee message and the billing agency identification request message m a 
sales record database within the retail entity server. 

Still fijrther, in accordance with the present invention, there is provided a method for 
guaranteeing credit in electronic commerce transactions between at least one member and at 
least one retail entity, the method comprising: 

accessing a member maintenance server operated by a settlement agency by a 
member desiring an electronic commerce transaction with a retail entity, wherein the member 
maintenance server verifies the member's identification and any associated member 
information of the member; 

generating selected information relating to at least one of selected payment 
method information and associated private information about the retail entity from selected 
information obtained from a transaction approval server operated by a credit guarantee 
institution and transmitting the selected information from the transaction approval server to at 
least one of the member maintenance server and retail entity server which requested tiie 
information; 

generating a settlement agency identification guarantee message from selected 
information obtained from the transaction approval server and transmitting the settlement 
agency identification guarantee message from the transaction approval server to the retail 
entity server; 

generating an anonymous user identification from selected information 
obtained from the member which accessed the retail server and transmitting the anonymous 
user identification from the member to the retail entity server; 

compiling selected address information relating to the member maintenance 
server assigned to the anonymous user identification from selected information contained in 
the settlement agency identification guarantee message received by the retail entity server; 

generating a billing agency identification search request message from 
selected information obtained from the retail entity server and transmitting the billing agency 
identification search request message from the retail entity server to the member maintenance 
server, wherein the billing agency identification search request message includes retail entity 
identification information and the anonymous user identification; 
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generating a retail entity identification search request message from selected 
information obtained from the member maintenance server and transmitting the retail entity 
identification search request message from the member maintenance server to the transaction 
approval server, wherein the retail entity identification search request message includes the 
5 retail entity information contained in the billing agency identification search request 
message; 

generating a retail entity identification guarantee message from selected 
information obtained from the transaction approval server and transmitting the retail entity 
identification guarantee message containing the selected information from the transaction 
10 approval server to the member maintenance server; 

verifying information received from the transaction approval server by the 
member maintenance server, generating a transaction completion notice from selected 
'2 information obtained from the member maintenance server, and transmitting the transaction 



M completion notice from the member maintenance server to the member to confirm the 

i S 15 associated transaction, wherein the transaction completion notice includes an order number 

generated by a select one of the member maintenance server and the retail entity server and 

ii selected information from at least one of associated member information, retail entity 

U| identification guarantee message, and billing agency identification search request message; 

; If storing the order number and selected information from the billing agency 

i; g 20 identification request message at the member maintenance server, generating a transaction 
' ™ completion report message from selected information obtained from the member 

maintenance server, and transmitting the transaction completion report message from the 
member maintenance server to the retail entity server; wherein the transaction completion 
report message includes the order number, selected information from the billing agency 
25 identification search request message, and selected information from the transaction 
completion notice relating to the result of the transaction; 

generating a transaction report message from selected information obtained 
from the member maintenance server and transmitting the transaction report message to the 
transaction confirmation server, wherein the transaction report message includes the order 
30 number and selected information from the billing agency identification search request 
message; 

upon receipt of the transaction completion report message by the retail entity 
server, generating a transaction verification request message from selected information 
obtained from the retail entity server, and transmitting the transaction verification request 
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message from the retail entity server to the transaction approval server, wherein the 
transaction verification request message includes the order number; 

verifying the information contained within the transaction report message and 
transaction verification request message, and upon verification, storing selected information 
relating to the order number and applicable associated transaction monies in a transaction 
record database within the transaction approval server, generating a transaction verification 
message for the order number from selected information obtained from the transaction 
approval server, and transmitting the transaction verification from the transaction approval 
server to the retail shop server; and 

upon receipt of the transaction verification message by the retail entity server, 
storing the order number and selected information from at least one of the settlement agency 
identification guarantee message and the billing agency identification request message in a 
sales record database within the retail entity server. 

Still further, in accordance with the present invention, there is provided a method for 
guaranteeing credit in electronic commerce transactions between at least one member and at 
least one retail entity, the method comprising: 

accessing a member maintenance server operated by a settlement agency by a 
member desiring an electronic commerce transaction with a retail entity, wherem the member 
maintenance server verifies the member's identification and any associated member 
information of the member; 

generating selected information relating to at least one of selected payment 
method information and associated private information about the retail entity from selected 
information obtained from a transaction approval server operated by a credit guarantee 
institution and transmitting the selected information from the transaction approval server to at 
least one of the member maintenance server and retail entity server which requested the 
information; 

periodically accessing and obtaining selected information from the member 
maintenance server and maintain such information in a settlement agency identification 
guarantee information database on the retail entity server; 

generating an anonymous user identification from selected information 
obtained from the member which accessed the retail server and transmitting the anonymous 
user identification from the member to the retail entity server; 

compiling selected address iirformation relating to the member maintenance 
server assigned to the anonymous user identification from selected information contained in 
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the settlement agency identification guarantee information database on the retail entity 
server; 

generating a billing agency identification search request message fi-om 
selected information obtained from the retail entity server and transmitting the billing agency 
5 identification search request message firom the retail entity server to the member maintenance 
server, wherein the billing agency identification search request message includes retail entity 
identification information and the anonymous user identification; 

generating a retail entity identification search request message from selected 
information obtained from the member maintenance server and transmitting the retail entity 
10 identification search request message from the member maintenance server to the transaction 
approval server, wherein the retail entity identification search request message includes the 
retail entity information contained in the billing agency identification search request 
message; 

generating a retail entity identification guarantee message from selected 
15 information obtained from the transaction approval server and transmitting the retail entity 
identification guarantee message containing the selected information fi:om the transaction 
approval server to the member maintenance server; 

verifying information received from the transaction approval server by the 
member maintenance server, generating a transaction completion notice from selected 
20 information obtained from the member maintenance server, and transmitting the transaction 
completion notice from the member maintenance server to the member to confirm the 
associated transaction, wherein the transaction completion notice includes an order niunber 
generated by a select one of the member maintenance server and the retail entity server and 
selected information from at least one of associated member information, retail entity 
25 identification guarantee message, and billing agency identification search request message; 

storing the order number and selected information from the billing agency 
identification request message at the member maintenance server, generating a transaction 
completion report message from selected information obtained from the member 
maintenance server, and transmitting the transaction completion report message from the 
30 member maintenance server to the retail entity server; wherein the transaction completion 
report message includes the order number, selected information from the billing agency 
identification search request message, and selected information firom the transaction 
completion notice relating to the result of the transaction; 



generating a transaction report message from selected information obtained 
from the member maintenance server and transmitting the transaction report message to the 
transaction confirmation server, wherein the transaction report message includes the order 
number and selected information from the billing agency identification search request 
message; 

upon receipt of the transaction completion report message by the retail entity 
server, generating a transaction verification request message firom selected information 
obtained firom the retail entity server, and transmitting the transaction verification request 
message fi"om the retail entity server to the transaction approval server, wherein the 
transaction verification request message includes the order number; 

verifying the information contained within the transaction report message and 
transaction verification request message, and upon verification, storing selected information 
relating to the order number and applicable associated transaction monies in a transaction 
record database within the transaction approval server, generating a transaction verification 
message for the order number fi-om selected information obtained firom the transaction 
approval server, and transmitting the transaction verification fi'om the transaction approval 
server to the retail shop server; and 

upon receipt of the transaction verification message by the retail entity server, 
storing the order number and selected information from at least one of the settlement agency 
identification guarantee message and the billing agency identification request message in a 
sales record database within the retail entity server. 

These and other aspects of the invention will be apparent to one of ordinary skill in 
the art upon the reading and understanding of the specification. 

BRIEF DESCRIPTION OF THE DRAWINGS 
Fig. 1 is a schematic block diagram of the network on the Internet. 
Fig. 2 is a schematic block diagram of the network in a first example of present 
invention. 

Fig. 3 A shows a procedure diagram of a communication procedure carried out 
between the member maintenance server that forms the network mentioned in the first 
example and the transaction approval server when the settlement agency program is installed. 

Fig. 3B shows a procedure diagram of a communication procedure carried out 
between the shop server that forms the network mentioned in the first example and the 
transaction approval server when the shop program is installed. 
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Fig. 3C is a schematic diagram of the contents of information transmitted in the above 
procedure. 

Fig 4 is a procedure diagram of the member computer that forms the network 
mentioned in the first example when it logs into the member maintenance server. 

Fig. 5 is a procedure diagram of a communication procedxjre in the electronic 
commerce transaction in the first example. 

Fig. 6 is a schematic diagram of the contents of information transmitted when the 
electronic commerce transaction is communicated. 

Figs. 7A and 7B show an example of a cancellation procedure from the first example. 
Fig. 7A shows a procedure diagram of such procedure and Fig. 7B shows a schematic 
diagram of the contents of information transmitted in such procedure. 

Figs. 8A and 8B show a second example of a cancellation procedure in the first 
example. Fig. 8A shows a procedure diagram of such procedure and Fig 8B shows a 
schematic diagram of the contents of information transmitted in such procedxure. 

Figs. 9A and 9B show an example of the procedure when the settlement agency 
deposits transaction fee collected fi'om the member to the shop in the first example. Fig. 9A 
shows a procedure diagram of such procedure and Fig. 9B shows a schematic diagram of 
information transmitted in such procedure 

Figs. lOA, lOB, and IOC show an updating procedure of identification information 
registered in the transaction approval server in the first example. Fig lOA shows a 
communication procedure between the member maintenance server and the transaction 
approval server, Fig. lOB shows a communication procedure between the shop server and the 
transaction approval server, and Fig. IOC is a schematic diagram of the contents of the 
information transmitted in the procedures in Figs. lOA and lOB. 

Fig. 1 1 is a schematic diagram of an example of connection condition between the 
member computer and the member maintenance server in the second example in present 
invention. 

Fig. 12 is a schematic diagram of network in the third example of present invention. 
DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Interconnection Network 

The Internet is used as an example of an interconnection network in which the present 
invention for a method of credit guarantee is applied. Fig. 1 is a schematic block diagram of 
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the Internet. The Internet is a "network between network" where each network, like a 
network operated by a provider or LAN, is connected to each other. There are enormous 
numbers of various computers, from user computers, 10a through 10c, operated by an 
average user, to host computer 20 like WWW server, that are connected organically in this 
interconnection network. 

There are many types of user computers and many methods to coimect to the Intemet 
If a user computer is an average personal computer 10a, then it is customary to use a dial-up 
IP coimection (cl) via an access point 20e provided by an Intemet coimection entity 
(provider). If it is a private line, then a personal computer 10a connected to router 1 1 forms a 
user computer 10c, and such router 1 1 is connected to the router 21 managed by the provider. 

If the connection to the Intemet is independently capable, such as a portable phone 
10b, then such portable phone lob connects to the mobile communication network via 
wireless base station 31. Also, a mobile communication entity's protocol converter called 
gateway server 20d intercoimects (c3) the mobile communication network 30 and the 
Intemet 

The present invention is directed to a method of credit guarantee in electronic 
commerce transactions through an interconnection network such as the Intemet. The 
computer systems which are used in the present invention are defined as below. 

Member Maintenance Server 

The member maintenance server is defined as a host computer that maintains member 
information relating to the many registered members, and also maintains the database of 
private information (member information) of each member on the network. The member 
maintenance server is operated by a settlement agency which also collects the purchase 
payment on behalf of a shop when a member purchases a product from a shop through an 
electronic commerce transaction. 

Member Computer 

The member is defined as a registered member m contract with a suitable settlement 
agency and who purchases a product from a shop on the network. The member computer is 
defined as a user computer used by a member for electronic commerce on the network. 

Shop Server 
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A product selling agency (shop) is defined as an agency operating an electronic shop 
that sells product on the network, and the shop server is defined as a host computer that 
displays electronic shops on a web site. 

Transaction Approval Server 

The credit guarantee agency is defined as an agency that enters into contracts with 
many product selling agencies and many settlement agencies, and makes credit guarantees 
relating to the commercial transaction between a product selling agency and a member of a 
credit guarantee agency. The transaction approval server is defined as a host computer that 
maintains the database of information for each agency with which the credit guarantee 
agency enters into a contract and the transaction approval server operates on the network. 

Summary of the Method of Credit Guarantee 

An example of the present invention is a business model wherein a member registered 
with a provider makes an electronic commerce transaction and such provider makes a 
substitute collection of purchase price. In this model, the provider maintains the IP address 
of the member, and the member pays an established Internet connection fee to the provider. 

The shop server receives the IP address of the member computer that accessed the 
shop server as a product purchaser, and uses this as distinct information (anonymous user ID) 
to specify an individual without disclosing the private information. The shop server sends 
the IP address received to the corresponding computer in the member maintenance server 
operated by the provider, and the shop server requests payment for the purchase to such 
computer. The provider then determines which member used such IP address on a date the 
electronic commerce transaction occurred, and in the future, collects the purchase price for 
product purchased in the electronic commerce transaction and the Internet connection fee 
from the member. 

However, as mentioned above, there are many ways to connect to the Internet by the 
user computer. For example, one computer is used by many people or an IP address is shared 
by multiple computers. Therefore, the possibility exists that the IP address may not be the 
anonymous user ID. Moreover, there are many Internet users that do not subscribe to a 
specific provider as one can access the Internet by using an information fee collection 
substitute service by a commimication business entity, or one can take advantage of free 
Intemet connection services operated by advertising earnings. Of course, there are 
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interconnection networks other than the Internet where several LANs are interconnected 
through gateway. 

Therefore, the present invention offers a general-purpose business model in which 
provides credit guarantee without the disclosure of private information in electronic 
commerce through an interconnection network. 

The basic idea is that the credit guarantee agency enters into individual contract with 
many settlement agencies and many shops, and when the electronic commerce transaction 
between a shop and a registered member in each settlement agency is made, it guarantees the 
personal guarantee of both the shop and the settlement agency and preserves the evidence 
relating to the collection substitute. The settlement agency preserves the evidence of 
electronic commerce transaction and the personal guarantee of a member by maintaining 
information about the member that made commercial transaction. 

Network Structure 

As mentioned above, in one embodiment, the provider ftmctions as a settlement 
agent, and the member computer connects to the Internet by a dial-up IP connection. Below 
is an explanation of the network structure and the communication procedure as Example 1 
when the present invention is applied to such a model. Fig. 2 is the schematic diagram of the 
network structure in this Example 1. 

In Example 1 as shown in Fig. 2, the member computer 10 access to the Internet by a 
dial-up IP connection 40, and the member computer 10 and the shop server 20b participate in 
an electronic commerce transaction Based on this commercial transaction, the member 
server 20a, the shop server 20b, and the transaction approval server 20c have reciprocal 
communication transmissions between each other through the Internet which are shown as 
12. In this example, the member maintenance server 20a and the shop server 20b make the 
communications through the Internet, but, of course, the private line can also be used. 

The member maintenance server 20a includes the access server 21 that connects the 
member computer 10 to the Internet by rending an suitable IP address when accesses the 
member maintenance server by the PPP procedure. The member maintenance server also 
includes the approval server 22 which maintains the passwords and ID for each member and 
performs the approval procedure based on the passwords or ID received by the access server 
21 from user computer 10 and also records, m an access log, which ID is allocated to which 
IP address for which time period. The member maintenance server further includes a router 
23. 
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Moreover, the member maintenance server 20a or the shop server 20b suitably may 
function as a WWW server and react to the HTTP request from the accessed member 
computer 10, return to the specific web page request, and start-up the fixed program, such as 
CGI, by returning the process result as a web page form. 

5 

Installation Of Program 

The shop server or the member maintenance server is the computer system operating 
due to the action of the host computer or the computer installed with a program, or the 
computer system installed with program to process the collection substitute or electronic 
10 commerce transaction according to the present invention to the host computer 

In this example, the above program is installed in the WWW server as the CGI. The 
program installed in the shop server is defined as a shop program, and the program for the 
O member maintenance server is defined as the settlement agency program. 

If such program can be obtained or installed without any regulation, then substitute 
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Sip? 



15 collection can be wrongly obtained in a forged electronic commerce transaction by 
';F fabricating the shop server or by stealing the product without substitute collection by 

fabricating the member maintenance server. If the program is sold only to the shop or the 
.' settlement agency that entered into a formal contract with the credit guarantee agency, then 

■I St? 

{ U the identification of the program purchaser becomes clear and the possibility in misuse of 
Q 20 program will be extremely lowered. However, that will not be the case if the program itself 
is copied. 



Procedure of License Key Issuance 

Fig. 3 A and 3B show the communication procedure between the transaction approval 
25 server 20c and the member maintenance server 20a when it installs the settlement agency 
program, and the communication procedure between the transaction approval server 20c and 
the shop server 20b when it installs the shop program, respectively. Also, Fig. 3 (C) is the 
contents of information exchanged in the above procedures. 

When the settlement agency or the shop tries to install the lawfully purchased 
30 program to the each entity's computers, these computers connect to the transaction approval 
server 20c, and transmit the shop registration request message and the settlement agency 
registration request message that includes information concerning the settlement method or 
the identification and the particular serial number of the shop or the settlement agency for 
such program (si, s3). The transaction approval server 20c in exchange for sending of the 
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registration request messages, and issues and sends the license key (s2, s4) to the member 
maintenance server or the shop server. The license key is the identification information 
needed for access to the transaction approval server 20c by the member maintenance server 
20a and the shop server 20b. The transaction approval server 20cregisters the Ucense key and 

5 the corresponding serial number in order to avoid the multiple installation of same program 
to the varied computers. 

Also, the transaction approval server 20c issues the settlement agency ID to the 
member maintenance server 20a and the shop ID to the shop server 20b, along with the 
license key. The settlement agency ID and the shop ID contain information conceming the 

10 identification of the agency and the shop, respectively, which is when the member 

maintenance server 20a and the shop server 20b communicate with the transaction approval 
server. 

Q The name of the settlement agency, address, representative, address of the member 

!: ; maintenance server, corresponding anonymous user ID, and the settlement method (fee, 
"E 15 transfer date etc.) are registered on a database on the transaction approval server as settlement 
i agency information. The shop name, address, representative, shop server address, and the 
'f' settlement method (transfer account etc.) are registered on a database on the transaction 
H: approval server as the shop information. 

py The anonymous user ID in the settiement agency information is the information 

liL! 20 disclosed to tiie shop server 10b in an electronic commerce transaction by the member 

computer 10a. In the present example, it is the IP address used by the member computer 10 
when connecting to the Internet. Assignment of the anonymous user ID becomes the address 
range (Net mask) of the IP address the provider assigned to the member computer 10a. 
Also, in this example, the address information included in the identification 
25 information of the member maintenance server 20a or the shop server 20b is registered after 
the transaction approval server 20c receives the sender IP address of the member computer. 

Log-In To The Member Maintenance Server 

The member computer 10 needs to log-in to the member maintenance server when it 
30 commences the electronic commerce transaction in tiie present invention. Fig. 4 is the 
summary of such log-in procedure. The member computer 10 accesses to the member 
maintenance server 20a and sends member ID and passwords to the member maintenance 
server. In this example, the log-in procedure is the approval procedure used to approve the 
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passwords and the member ID received when the member computer 10a accesses the 
member maintenance server 20a through the known PPP procedure. 

The member maintenance server then searches the database for these passwords and 
member ID and retrieves the appKcable member information. The member maintenance 
server then assigns an anonymous user ID to this member computer 10. In this example, the 
IP address is issued as anonymous user ID (si 2). The member maintenance server 20 assigns 
the IP address only when the member computer 10a is connected to the dial-up IP 
connection. The member maintenance server 10a records the IP address and the periods of 
time for log-in and stores them with the applicable member information. 

The anonymous user ID is important aspect of present invention. The member 
maintenance server 20a assign the anonymous user ID to the specific member. The member 
computer 10 discloses this anonymous user ID, in substitute for the private information of the 
member, to the shop server 20b when making an electronic commerce transaction with the 
shop server 20b. The settlement agency, on behalf of the shop, collects the transaction 
charge against the user of this anonymous user ID. 

Credit Guarantee and the Electronic Commerce Transaction 

Figs. 5 and Fig. 6 show the electronic commerce transaction along with the procedure 
for the credit guarantee and the contents of information transmitted in this procedure. 

Accrual of Product Purchase Event 

The member computer 10, through an HTTP request / response to the shop server 
20b, sends for a web page to receive order instructions for a product purchase or the web 
page for product description (s21, s22). In this page, there are spaces to fill in related to the 
delivery point and other information for each product ordered. If the product is data, 
software or others that are sold by downloading, then the above information is not generally 
needed. 

The shop server 20b receives the IP address of member computer 10 when the 
instruction for the order of the product (accrual of product purchase event, s23) is made by 
way of returning the filled in form, and records the time of product purchase event 
(transaction date), transaction amount including shipping charge, tax, and product charge, 
and the name of ordered product and stores such information in connection with this IP 
address. 
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Identity Search Request of Settlement Agency 

The shop server 20b, by reacting to the product purchase event (s23), accesses the 
transaction approval server 20c and starts the approval procedures using its license key. 
5 Afterwards, the settlement agency identity search request message that includes IP address 
disclosed by the member computer 10 is returned to the transaction approval server 20c 
(s24). 

The transaction approval server 20c selects the applicable settlement agency by 
searching the database for the IP address, generates the settlement agency identity guarantee 
10 message, which includes selected settlement agency information concerning this agency, 
sends the settlement agency identity guarantee message to the shop server 20b (s25). In this 
example, the settlement agency identity guarantee message includes the settlement agency's 
□ name, address, method of settlement and the address of the member maintenance server that 

a 

uA this settlement agency manages which are selected from the applicable settlement agency 
X 15 information. 

m. 

u Billing Substitute Request 

; ,=1 The shop server 20b accesses the member maintenance server 20a based on the 

f U address information included in the settlement agency identity guarantee message, and sends 
Q 20 the billing substitute message that includes shop ID for its own identity information and the 
IP address received from the member computer 10 (s26). In this example, the billing 
substitute request message includes transaction amount and date, the shop ID and the IP 
address. 

25 Identity Search Request of Shop 

The member maintenance server 20a receives the address information of the shop 
server 20b that sent the billing substitute request message. Afterwards, it accesses the 
transaction approval server 20c and starts the approval procedures using its license key, and 
sends shop identity search request message that includes shop ID and other information 
30 contained in the billing substitute request message (s27). 

The transaction approval server 20c searches the database based on the shop ID 
included in the shop identity search request message, and selects the shop's name, address, 
transfer account, and other information in the applicable shop information, and returns such 
selected information as the shop identity guarantee message to the member maintenance 
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sever 20a (s28). Also, in this example, the address information of the shop server 20b is also 
included in this message. As result, the member maintenance server 20a verifies the address 
information received in the billing substitute request message with tiie address information 
received from the transaction approval server 20c, and is able to determine if this billing 
5 substitute request is sent from the rightful shop server 20b. 



Transaction Confirmation Notice 

The member maintenance server 20a, once it receives the shop identity guarantee 
message, generates the one and only order number to uniquely specify the applicable 
10 electronic commerce transaction, and sends the transaction confirmation notice that includes 
such order number and selected information from the billing substitute request message to the 
member computer 10 that currently uses IP address recorded in the billing substitute request 



O message previously received (s29). 



i!i The transaction confirmation notice is sent to the member computer 10 as a web page. 



ill 15 and the order number, name and address of the shop, transaction date, and the transaction 

amount of the applicable transaction is contained in this page. Moreover, based on the 
ii applicable member information, the transaction amount or the order number of other 



electronic commerce transactions that did not complete the billing substitute is stated in the 
i'U transaction confirmation notice as remainder information. As result, commercial transactions 
i;3 20 by the "forged member" that unjustly obtained the member ID and the passwords are 
detected right away. 

Also, the member computer 10a in this example has the built-in program that displays 
the web page sent unilaterally by the member maintenance server 20a, without using HTTP, 
as function enhancement software (plug-in) for the browser. 

25 

Completion Confirmation, Transaction Completion Confirmation Report. Transaction Report 
Once the transaction confirmation notice is received, the user input for instructing the 
approval or rejection is made by the member to the member computer 10, and such input 
information is sent to the member maintenance server 20a as the completion confirmation 
30 (s30). The member maintenance server 20a stores the completion confirmation result 

(approval or rejection of the transaction), the applicable billing substitute request message, 
and the order number with the applicable member information. Afterwards, the completion 
confirmation resxilt, selected information (IP address, transaction date, transaction amount) 
from the billing substitute request message, and the transaction completion report message. 
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and the order number are sent to the shop server 20b (s31). Moreover, selected information 
(shop ID, transaction amount) from the billing substitute request message and the transaction 
report message, and the order number are sent to the transaction approval server 20c (s32). 

5 Transaction Verification 

The shop server 20b sends the order number stated in the transaction completion 
report received from the member maintenance server 20a and the transaction verification 
request message that includes transaction amount to the transaction approval server 20c 
(s33). Also, before transaction verification request message is sent to the transaction 
10 approval server, the shop server 20b, in this example, verifies the address information of 

member maintenance server that requested the billing substitute with the address information 
of the member maintenance server that sent the transaction completion report message. As 

□ result, whether this transaction completion report message is received from the rightfixl 

d 

member maintenance server is identified. 

WIS 

" f 15 The transaction approval server 20c compares the order number and the transaction 

amount that are included in both in the transaction report message received from the member 

m 

maintenance server 20a and the transaction verification request message received from the 
shop server 20b. If they coincide, such order number and the applicable transaction amount 
ill is recorded in the transaction record book associating the settlement agency with the shop 
Q 20 concerned, and maintained as the transaction evidence. Afterwards, the transaction approval 
^ ^ server sends the transaction verification message to the shop server 20b indicating that the 
order number and the transaction amount have coincided (s34). Also, the transaction 
approval server 20c, in this example, creates, as the database for verification of existence of 
electronic commerce truncation specific to the order number, the transaction certificate that is 
25 difficult to forge based on the suitable encryption algorithm, and attach this certificate to the 
transaction verification message. 

Transaction Completion Notice 

The shop server 20b, once it receives the transaction verification message, records in 
30 the sales records book selected information from the contents of the transaction (identity 
information and settlement method of the settlement agency of which the billing substitute 
was requested, transaction date, and the transaction amount) or the transaction certificate 
with the applicable order number. Afterwards, the transaction completion notice in forms of 
Web page indicating the transaction is completed to the member computer 10 (s35). 
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Other Procedures 

The computer systems used in the present invention often need to perform various 
procedures by timely communication in addition to those described above. Such various 
5 procedures and the method of credit guarantee in such procedures are explained below. 

Cancellation: First Embodiment 

There are instances where the purchased product is returned after transaction is 
completed or the member cancels due to the delay in delivery or other reasons. Figs. 7A and 
10 7B show the examples of such cancellation procedures. Fig. 7A shows the communication 
procedure and Fig. 7B shows the conmiunication contents. A cancellation request (s41) is 
, sent by the member 100 for a transaction with the specific order number to the shop 110. 

■3 The shop server 20b determines the settlement agency which was the substitute for the billing 
j,^ concerning the applicable transaction using the sales record book. The shop server accesses 

15 the member maintenance server 20a for such settlement agency and sends the cancellation 
■ N request message to stop the substitute billing for the transaction specific to the order nximber 
li (s42). Also, the cancellation request report message that indicates the cancellation is sent to 

the transaction approval server 20c (s43). 
ry The member maintenance server 20a searches the member information corresponding 

Q 20 to the order number in the cancellation request message, and determines whether the 
^ applicable transaction may be canceled based on whether the substitute billing was already 

taken place, and stores the results of such determination with the applicable member 
information. The member maintenance server sends the result of such determination to the 
shop server as a cancellation completion result message (s44). 
25 Also, the member maintenance server 20a sends to the transaction approval server 

20c selected information from the notice of cancellation request concerning the transaction 
and the result of determination as a cancellation completion report message (s45). This 
report (s45) includes the result of such determination, the shop ID and the order number of 
the shop server that requested the cancellation. The transaction approval server 20c records 
30 the result of determination in the applicable transaction record book once it receives the 
cancellation completion report message. 

Cancellation: Second Embodiment 
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Figs. 8A and 8B illustrate a variation in the cancellation procedure described above. 
The communication procedure is shown in 8A and the conamunication contents are shown in 
8B. A cancellation request (s51) is sent by the member 100, through a suitable procedure, for 
a transaction with a specific order number to the shop 110. The shop server 20b sends the 
cancellation request message to the member maintenance server 20a of the settlement agency 
specific to the order number (s52). Moreover, the cancellation request report message is sent 
to the transaction approval server 20c (s53). 

The member maintenance server 20a searches to the member information 
corresponding to the order number in the cancellation request message, and determines 
whether the applicable transaction may be canceled based on whether the substitute billing 
was already taken place. The member maintenance server sends the result of such 
determination to transaction approval server as a cancellation completion result message 
(s54). 

The transaction approval server 20c compares the order number in the cancellation 
completion result message with order number in the cancellation request report message sent 
by the shop server 20b. If the mmibers match, the certificate (cancellation certificate) for 
cancellation procedure for the specific transaction is created, and a cancellation verification 
message that includes such certificate and the order number is sent to the member 
maintenance server 20a (s55). Also, in this example, at a suitable point in the cancellation 
procedure, such as the creation for the cancellation certificate and the dispatched time of the 
cancellation request message, is defined as the cancellation time, and such time is included in 
the cancellation verification message* 

The member maintenance server 20a stores selected information fi-om the 
cancellation verification message received fi"om the transaction approval server 20c with 
applicable member information. The member maintenance server sends a cancellation 
completion result report message which includes the result of the determination to the shop 
server 20b (s56). 

Settlement 

This procedure involves depositing the transaction payment that was collected fi'om 
the member by the settlement agent with the shop. Figs. 9A and 9B show the procedures 
relating to such procedure and the information exchanged, respectively. The settlement 
agency 120 collects the payment relating to the electronic commerce transaction firom the 
member 100 in a fixed period (s61). The member maintenance server 20a, based on the 



24 



member information relating to the member 100, calculates all transaction payments relating 
to electronic commerce transactions with specific shop 110 accrued within the payment 
calculation period out of all payments collected from such member 100. Then, the payment 
announcement message that includes scheduled date of payment, amount payable in such 
scheduled date, settlement order number to specify the applicable payment itself, and 
specification of entire transaction is sent to the shop server 20b (s62). Also, the specification 
includes the order number, payment amount, and the collection status of such payment 
(collected / uncollected) concerning each transaction accrued in the payment calculation 
period. 

When the settlement agency 120 pays (s63) the settlement payment, which were 
collected by billing substitute, to shop 110 by various ways, such as depositing the payment 
in the specified acco\mt, the shop server 20b sends the payment receipt message, against the 
payment specific to the payment order number, that states the payment receipt date and the 
payment amount to the member maintenance server 20a (s64). 

Also, in addition to the procedure described above, the member maintenance server 
20a prepares a substitute-billing list assigned to the execution situation for remittance or a 
substitute-billing amount in the order number for each shop that had transaction. The 
member maintenance servers then sends the applicable substitute-billing list to those 
computer that requests to access such list when it was sent to the shop. 

Settlement Agency Information - Shop Information Renewal 

The settlement agency information and the shop information need to be renewed or 
updated according to changes in the identity information, such as the address and the address 
of the server, or in the settlement method, such as remittance financial institution. Fig. lOA 
shows the communication procedure for the transaction approval server 20c and the member 
maintenance server 20a when the renewal procedure is made on-line. Fig. lOB shows the 
communication procedure for the transaction approval server 20c and the shop server 20b. 
Fig. IOC shows the contents of information in these communication procedures. 

In this example, the member maintenance server 20a or the shop server 20b sends the 
renewed information and the scheduled date of the renewal to the transaction approval server 
20c (s71, s73). The transaction approval server responds if it is possible to complete the 
renewal on such scheduled date, and renews the information sent in the specified information 
on scheduled date (s72, s74). If the renewal is impossible on the scheduled date, the 
transaction approval server responds accordingly. The shop or the settlement agency may 
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copy against the response for the impossibility by making the suitable change of the 
scheduled change date. 

Tratisantion Stoppage 

In the method according to the present invention, the shop server 20b may decides 
whether to send the substitute-billing request to the member maintenance server 20a after 
confirming the contents of the settlement agency identification guarantee message. For 
example, the database for the conditions (deposition date) for the settlement method or the 
names of the settlement agency that do not make transaction is prepared, and compared with 
the settlement agency identification guarantee information that were sent. If the conditions 
were not met, then the transaction is stopped by notifying the member computers that it will 
not make the substitute-billing request. 

Similarly, the member maintenance server may decide whether to proceed with the 
substitute billing after confirming the shop information relating to the shop server that sent 
the substitute-billing request in the shop identification guarantee message. Then it notifies the 
shop server if it rejects the substitute billing. 

Identity Information M aintenance 

The member maintenance server 20a or the shop server 20b should store the identity 
information of communication partner in a certain electronic commerce event. By doing so, 
it is not necessary to make identity confirmation of the other party to the transaction approval 
server 20c when it deals with the same party. In this case, it is better to set up the valid terms 
for the stored identity information, in case that the various identity information, such as IP 
address of the communication partner, is changed. If the valid term of identity information of 
the other party has expired when the electronic commerce transaction is made with the same 
partner, then it can request the transaction approval server for the identity information again. 
In the alternative, it can regularly request the identity information of such partner once it 
made the transaction. 

Address Information Confirmation 

The present invention also provides the address information of the member computer 
that accessed the member maintenance server or the shop server to better ensure the 
guarantee of identity of the computer that made access to the member maintenance server 
20a or the shop server 20b. 
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If the substitute-billing request procedure is used as an example, the member 
maintenance server 20a investigates the identity of shop by sending to the transaction 
approval server 20c the shop ID attached in the substitute-billing request message sent by the 
member computer that accessed the shop server. The existence of the shop to which the 
license key was issued can be verified if the shop information relating to the shop ID exists. 
However, the identity of the computer itself that sent the shop ID is not guaranteed. 
Therefore, the member maintenance server 20a receives the ID address of the computer that 
accessed the shop server, and sends the shop identity search request message that includes 
shop ID to the transaction approval server 20c. 

The transaction approval server 20c returns the shop identification guarantee message 
that includes the address information (IP address of the shop server 20b) indicated in the shop 
information relating to the shop ID to the member maintenance server 20a, and the member 
maintenance server 20a compares the IP address in this message with the IP address 
previously received, and the subsequent procedures in the electronic commerce transaction 
are continued if these two match. 

The member maintenance server 20a may guarantee the identity of the shop, if the IP 
address of the shop server received by the substitute-billing request message is included in 
the shop identification search request message, and the shop information relating to both the 
IP address and the shop ID within such message in the transaction approval server 20c exists. 
Similarly, the identity of the settlement agency is more definitely guaranteed if the settlement 
agency ID in the transaction completion report message is made as a essential information, 
and the shop server 20b receives the IP address of the computer that sent the transaction 
completion report message, and compares the IP address of the member maintenance server 
20a that sent the substitute-billing request message previously with such IP address. 

Of course, the verification by way of IP address can also be applied to the various 
procedures accrued in other electronic commerce transactions, such as settlement procedure 
or the cancellation procedure. For example, if the member maintenance server 20a, in the 
settlement procedure in the form of inspecting the substitute-billing list, accepts or rejects the 
inspection by comparing the address information assigned to the shop ID sent by a computer 
and the address information of the computer that requested the inspection, then the list does 
not pass to the third party. 

Furthermore, the appropriate time to inquire as to the address information of the other 
party m the transaction to the transaction approval server 20c may be if the valid terms of 
identity information of the other party has expired when the member maintenance server 20a 
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and the shop server 20b are actually conununicating, or the address information of the other 
party in actual communication is different from the address information already stored due to 
the change in the identity information. 

Alternative IP Connection 

In the example 1 above, the member computer connects to the Internet via dial-up. 
However, the present invention also is suitable for other forms of Internet connection, such as 
the private line connection wherein the member computer is assigned to a fixed IP address. 

Fig. 1 1 illustrates the network structure when the provider is designated as the 
settlement agent and which the member computer is assigned the fixed IP address and is 
referred to as example 2. Numerous user computers 10a and the router 1 1 are connected to 
the LAN. Each user computer 10a is assigned with a fixed IP address. Router 1 1 and the 
provider router 21 are connected by a private line. In this form of connection, the member 
can use any of the user computers. 

The web page (log-in screen) with blank space (form) for verification information of 
log in procedure is prepared in the member maintenance server 20a. The member uses a 
certain computer 10 and the browser retrieves this log in screen. The verification information 
such as member ID and the password and entered in the designated blank space in this 
computer 10, and returned to the member maintenance server. 

After the member maintenance server 20a compares the applicable member 
information with the verification information returned, the user of this computer 10 is 
verified as the member and receives the IP address of this computer 10a. This computer 10 is 
logged in to the member maintenance server 20a as the member maintenance server 20a. The 
log in periods and the ID address of the member computer is recorded with the applicable 
member information. Therefore, the member maintenance server 20a provides identity 
guarantee of the member computer 10 (user) during the log in periods. 

In this model, the only difference is that the member maintenance server 20a monitors 
and records the log in periods after receiving the IP address of computer 10 that made the log 
in. The other procedures (cancellation etc.) and procedures relating to the electronic 
commerce are same as in example 1. 

If the member computer 10 is to log off from the member maintenance server 20a, 
then the web page for the log off is prepared in the member maintenance server 20a, and the 
member computer 10 can receive such page and merely follow the specific instructions or it 
is possible to automatically log off after passing the designated time since log in. 
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A preferred method is to use the JAVA Apurret. For example, the member 
maintenance server 20a sends JAVA Apurret to the member computer 10 that made the log 
in to constantly display the browser screen (subordinate screen) different from the browser 
screen displayed in the web page for the log in. The preset button to the CGI link for the log 
5 off completion is set up in this subordinate screen, and if this button is click by the mouse in 
this member computer 10, then it logs off 



Alternative Settlement Agency 

This embodiment provides for an agency other than the provider to be the settlement 
10 agency. This embodiment is shown in Fig. 12 and referred to as Example 3. 

For example, if a bank is designated as the settlement agency, and if such bank is to 

; ^ maintain the customer with deposit account as the member in the member maintenance server 

i' ^ 

Q 20a, then this member maintenance server 20a functions as the proxy (representative) server. 
}. i The member contracts with a free provider and makes the suitable forms of Intemet 
"P^ 15 connection, such as dial-up or the private line. The member, by setting the proxy set up of the 
"P browser installed in the member computer 10 to the proxy server 20a (member maintenance 

server) operated by the settlement agency, can have the web page sent to the browser through 
■iZ member maintenance server 20a. 

Fy Similar to the log in procedure in example 2 above, the member computer 10 receives 

i;5 20 log in screen from the member maintenance server 20a and logs in by returning the 

verification information that was entered into such screen. The member maintenance server 
20a provides the identity guarantee of the member computer during the member computer's 
log in and log out period. 

If the logged in member computer 10 transmits the HTTP request, addressed to the 
25 shop server 20b, on the Intemet, then, this request is sent to the member maintenance server 
20a according to the proxy set up (s8 1). The member maintenance server 20a converts the IT 
address of such request sender into the IP address of itself. Then, the request is sent to the 
shop server 20b by resending the converted IP address as the IP address of the sender from 
the HTTP request to the Intemet (s82). When the shop server 20b receives the request, it 
30 returns the HTTP response to the member maintenance server 20a (s83), and the member 
maintenance server 20a converts the return IP address of the HTTP response into the IP 
address of the member computer 10, and by resending such HTTP response to the Intemet, 
the concemed response is sent to the member computer 10 (s84). 
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As the member maintenance server 20a maintains when and which IP address is 
assigned to the logged in member computer 10 by relating them to the applicable member 
information, it is possible to apply method of credit guarantee in the present invention when 
the member computer 10 and the shop server 20b are involved in an electronic commerce 
transaction. 

Moreover, it is often that the proxy set up of the web browser of the computers 
installed in a school or business cannot be changed at free will. To apply the method of the 
present invention in electronic commerce transactions under such computer installation 
environment, the member maintenance server 20a may employ the method of receiving the 
exclusive browser, prepared as the JAVA Apurret, for electronic commerce transactions. 

Such exclusive browser already has the proxy set up to view the web page through 
member maintenance server 20b. If the log in screen is automatically displayed before such 
browser views the web, then it is possible to prevent the use of such exclusive browser unless 
it logs in. Then, the settlement agency makes the identity guarantee of the user of member 
computer, as member, that uses the exclusive browser. 

Other Applications 

Redirection 

When and if the member maintenance server 20a wants to send the transaction 
confirmation notice to the applicable member computer 10, it is possible to use the 
"redirection function" of HTTP rather than relying on the "plug in." The shop server 20b 
reacts to the product purchase event sent as the HTTP, and sends the HTTP redirection 
respond, which includes the URL to receive the transaction confirmation notice from the 
member maintenance server 20a, to the member computer 10. As result, the member 
maintenance server 20a sends the web page, equivalent to the transaction confirmation notice 
prepared according to the procedures s24 through s28 in Fig 5, to the member computer 10a. 
In this case, the member maintenance server 10a registers, to the transaction approval server 
20b, the URL to receive the transaction confirmation notice, as one of the address 
information relating to the settlement agency information, and the transaction approval server 
20c can easily include such URL in the settlement agency identification guarantee message. 

Moreover, in the transaction completion notice, the member maintenance server 20a 
reacts to the completion notice by the member computer and send the HTTP redirect 
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response, which includes the URL to receive the transaction completion notice from the shop 
server 20b, to the member computer 10. 

Anonymous User ID 

As mentioned above, the anonymous user ID, used to specify the member who made 
the electronic commerce without disclosing the private information, is illustrated by models 
using the IP address of the computer that generated the product purchase event. However, it 
is possible to use other information as the anonymous user ID rather than the IP address. For 
example, cookies can be used. For example, the member computer logs into the member 
maintenance server through web page in the log in page, the member maintenance server 
generates the cookie to the member computer. The member maintenance server maintains by 
assigning the log in period and the cookie of the member computer. The cookie is disclosed 
to the shop server when the member computer and the shop server pursue the electronic 
commerce transaction. Of course, the transaction approval server is said to maintain the 
information as the settlement agency information by assigning the cookie to the specific 
settlement agency. 

The interconnection network, comprised of the numerous LANs, without limiting to 
the Intemet, may use the MAC address as the anonymous user ID. If the transaction approval 
server maintains the association between the anonymous user ID and the settlement agency, 
then the data form (IP address, cookie etc.) of the anonymous user ID can differ among the 
settlement agencies. 

Shop Distinction Information^ Settlement Agency Distinction Information 

In example 1, when the member maintenance server and the shop server 
communicated, they provided the settlement agency ID and the shop ID as the information 
relating to the identity of themselves. If the identity information of the settlement agency or 
the shop is registered in the transaction approval server, then, instead of these IDs, for 
example, it can be the network name such as the domain name of the settlement agency or the 
shop itself, or the names of the settlement agency or the shop. 

Address Infom^^tipn 

In the example 1 above, the shop server reacts to the product purchase event from the 
member computer, and sends the anonymous user ID to the transaction approval server, and 
acquires the address information of the member maintenance server, as the settlement 



31 



identification guarantee message, for the delivery address for the substitute-billing request 
message. Other than this receipt procedure, the transaction approval server may acquire, in 
advance, by sending the address information of the member maintenance server, information 
relating to the anonymous user ID used by the applicable settlement agency, and the address 
information of the member maintenance server to the shop server. Of course, the data 
recording media, such as CD-ROM, with information relating to the anonymous user ID and 
the address information of the member maintenance server may be distributed to the shops in 
advance, and the shop server could maintain the information in such media by reading the 
information inside. 

History of Transaction 

In the example 1 above, the member maintenance server, at the time it receives the 
transaction completion confirmation from the member, assigns the applicable member 
information with the information selected from the substitute-billing request message and the 
order number and maintain this assignment as the last record of a certain transaction. 
However, although obvious, the history relating to a certain transaction starts from 
dispatching of the substitute-billing request message. Then, the information created or 
receives in the communication events occurred thereafter shall be added to the applicable 
history of the transaction at any time. Also, until the order number is created, the pair of 
anonymous user ID and the transaction date may be used as the suitable information to 
specify a Iransaction. Moreover, the shop may issue and use the transaction number as the 
temporary distinction information until the transaction is completed. 

Of course, the transaction record book of the transaction approval server or the sales 
record book of the shop server shows the recording status among selected information at the 
end of completion of the transaction. 

Order Number 

In the example 1 above, the member maintenance server creates the order number 
when it receives the shop identification guarantee message from the transaction approval 
server. However, the order nimiber may be created at suitable time after the substitute-billing 
request message is sent from the shop server. Moreover, the place to create the order number 
does not have to be limited to the member maintenance server, but it is also the shop server. 
For example, the shop server creates the order number by reacting to the product purchase 
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event, and follow the procediire of completing tiie applicable transaction by circulating such 
order number among each server. 

The method of the present invention in which the settlement agency to collect the 
product purchase payment from the member on behalf of the product selling entity when 
5 there is an electronic commerce transaction through an interconnection network, such as 
Internet, between the member registered in a certain settlement agency and the product 
selling entity, and that the credit guarantee entity provides for evidence preservation of the 
commercial transaction and the identification guarantee of both the product selling entity and 
the settlement agency, and allows the settlement agency provide the identity guarantee of the 
10 member. Therefore, it is possible to secure high degree of the reliability against such an 
inconsistent task of "credit guarantee by concealing the private information." 
i^^p. The transaction approval server in the electronic commerce can guarantee the identity 

.^if of the other party against the request from the product selling entity and the settlement 

'i BO? 

i --^ agency, and verify the specific order number unique to a transaction by forcing both entities 
{ p 15 to send such number. Thereby, the forged transaction or fabrication of content of the 

transaction can be avoided and eliminated. 
n By maintaining the transaction in the order number, it can specify the applicable 

I -J transaction by the order number after the cancellation, and llie transaction approval server 
can compare the order number, subject to the cancellation, received from both the member 
Q 20 maintenance server and the shop server, and make the guarantee in high degree of reliability 
' in cancellation procedure. 

For electronic commerce transactions pursuant to the method of present invention, the 
serial number is assigned to the programs that are installed in the host computer, and the 
serial nimiber is sent to the transaction approval server when installed, and the identity 
25 information of the installation base is registered. The license key is issued in exchange for 
such serial number and the registration of the identity information to make possible access to 
the transaction approval server. Thereby, it is possible to eliminate the appearance of forgers 
who make fraudulent copies of program itself 

By prohibiting the access by the computer without the license key, the transaction 
30 approval server can respond to instances where the legitimate product selling entity or the 
settlement agency changes the identity information and others on line. Therefore, unless it is 
changed in very important items, it is not necessary to make changes in writing and therefore, 
it eliminates or shortens the period of stoppage in the electronic commerce transactions due 
to procedures. 
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The member maintenance server or the shop server may eliminate the forged message 
by verifying the address information of the other party included in the message sent by the 
transaction approval server with the address information of the actual party in 
communication. 

It will be appreciated by persons skilled in the art that numerous variations and/or 
modifications may be made to the invention as shown in the specific embodiments without 
departing jfrom the spirit or scope of the invention as broadly described. The present 
embodiments are, therefore, to be considered in all respects as illustrative and not restrictive. 
Other features and aspects of this invention will be appreciated by those skilled in the art 
upon reading and comprehending this disclosure. Such features, aspects, and expected 
variations and modifications of the reported results and examples are clearly within the scope 
of the invention where the invention is limited solely by the scope of the following claims. 
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